اختبار الفايز صح وخطاء

Due care:means that an organization took all reasonable measures to prevent security breaches and also took steps to mitigate damages caused by successful breaches

Split knowledge: Ensures that single employee knows all the details to perform a task

If a risk assessment is not supported and directed by senior management, it will not be successful

The risk assessment team determines the budget of the risk assessment project

Tangible assets include intellectual property, data, and organizational reputation

Total risk is the risk that an organization could encounter if it decides not to implement any safeguards

A system-specific security policy outlines how to protect a specific computer, network, technology, or application

Informative security policies act as an educational tool

After data is classified, the data can be segmented based on its level of protection needed

Military and governmental entities usually classify data using four main classification levels

Polymorphism refers to the ability of objects to respond to different messages or inputs with the same output

Coupling describes the degree of interdependence between modules or components in a system.

Data structure refers to the way in which data is organized and stored in a computer system.

CORBA uses a component called Object Request Broker (ORB) to implement exchanges among objects in a heterogeneous, distributed environment

COM is a model for communication between processes on the same computer

Validation testing takes a higher level view and determines whether the original purpose of the software has been achieved

Build and Fix approach has been largely discredited and is now used as a template for how not to manage a development project

Prototyping is a relatively expensive approach to exploring a specific solution to a problem, and is typically only used when extensive time and cost have been invested in the approach

-(JAD) model is a model that strictly adheres to formal steps and a more structured method. It attempts to prevent errors and mistakes through extensive testing

Object-Oriented Programming does not allow for modularity in design through autonomous objects, and does not facilitate the reusability of components

Does a mono-alphabetic substitution cipher use multiple alphabets

Did the Spartans create the scytale cipher

Is the Caesar cipher a poly-alphabetic cipher

Is the Vigenere cipher a polyalphabetic substitution cipher

Does the Vigenere cipher use 27 shift alphabets

Is the Attestation Identity Key (AIK) in the TPM used to attest to the identity of the TPM

Does link encryption encrypt all the data transmitted over a link

Are packets decrypted at each device in link encryption

Does end-to-end encryption encrypt less of the packet information than link encryption

Does end-to-end encryption require no user interaction